Decoherence-Pree Subspaces in Quantum Key Distribution 



Zachary D. Waltonp Ayman F. Abouraddy, Alexander V. Sergienko, Bahaa E. A. Saleh, and Malvin C. Teich 
Quantum Imaging Laboratory, Department of Electrical & Computer Engineering, 
Boston University, 8 Saint Mary's Street, Boston, Massachusetts 02215-2421 

We demonstrate that two recent innovations in the field of practical quantum key distribution 
(one-way autocompensation and passive detection) are closely related to the methods developed to 
protect quantum computations from decoherence. We present a new scheme that combines these 
advantages, and propose a practical implementation of this scheme that is feasible using existing 
technology. 
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Decoherence has been a principal impediment in quan- 
tum information processing applications. In quantum 
computing, decoherence-induced deviations from the de- 
sired computational trajectory at the single-qubit level 
will quickly accumulate if left uncorrected. Thus, tech- 
niques such as decoherence-free subspaces (DFSs, for a 
review, see Ref. JJ) have been developed as tools for pro- 
tecting quantum computations. In quantum key distri- 
bution (QKD, for a review, see Ref. .2|), single-qubit er- 
rors are also deleterious; however, sufficiently infrequent 
single-qubit errors are tolerable, since the resulting errors 
can be corrected by classical error correction protocols. 
This has led many QKD experimentalists to forego the 
complexity of decoherence-mitigation techniques such as 
DFSs in favor of more conventional methods to improve 
the precision of single-qubit operations (periodic align- 
ment of polarization axes, temperature stabilization of 
interferometers, etc.). In this letter, we consider the ap- 
plicability of DFSs to QKD. 

This letter is organized as follows. We begin by demon- 
strating that a recently-proposed QKD implementation 
(one-way autocompensating quantum cryptography Q) 
is, in fact, equivalent to a well-known DFS. We then pur- 
sue a suggestion in Ref. to consider a single-qubit, 
phase-time coding QKD scheme in which Bob is not re- 
quired to actively switch between conjugate measurement 
bases. We show that both one-way autocompensation 
(OWA) and passive detection are achieved by embed- 
ding the logical Hilbert space in a larger physical Hilbert 
space. Next, we describe a new scheme that combines 
OWA and passive detection. Finally, we propose an ex- 
perimental implementation of this new scheme that is 
feasible using existing technology. 

Relating OWA and DFSs.— In Ref. 3], Klyshko's "ad- 
vanced wave interpretation" Q was used to describe 
OWA as a variation on round-trip autocompensation [HI 
1^. These schemes are called autocompensating because 
they allows high-visibility quantum interference without 
calibration or active stabilization of the receiver's (Bob's) 
apparatus. In the context of quantum computation the- 
ory a more natural explanation of OWA is provided 
by DFSs. Palma et al. have shown that a single logical 



qubit encoded in two physical qubits according to 
|0) ^ 101) 

|1) ^ |10) (1) 

will be protected against collective dephasing. Collective 
dephasing describes a noise model in which each physical 
qubit is subject to the same transformation 

|0) - |0) 

|1) ^ e^-^ll), (2) 

where cj) is an uncontrolled degree of freedom. Under this 
transformation, the states |01) and |10) acquire the same 
phase factor (e"^). Thus, a qubit encoded according to 
Eq. Q will be immune to collective dephasing. 

To link this DFS to OWA, we consider time-bin pho- 
tonic qubits 0, in which the physical basis states |0) and 
|1) correspond to early (|E)) and late (|L)) single-photon 
wavepackets, respectively. Two-qubit states (e.g. |EL)) 
may be created in which the two time-bin qubits are dis- 
tinguished by some convenient degree of freedom (e.g. 
polarization, or a time delay much longer than that used 
to define the individual time-bin qubits themselves). 

In OWA quantum cryptography, Alice superposes the 
two-qubit time-bin states |EL) and |LE) with one of four 
relative phases (0, 7r/2, tt, 37r/2) and sends the two-qubit 
state to Bob. Note that the superposition of |EL) and 
|LE) entails time-bin entanglement, an idea introduced 
in Ref. j^. Bob applies one of two relative phase shifts 
(0, 7r/2) to the superposed terms and makes his measure- 
ment. In this way, they may effect the familiar four-state 
QKD protocol (BB84) [l^. 

The equivalence of OWA and the DFS in Eq. ^ may 
be seen by carefully following Bob's detection process. 
After applying his phase shift, Bob analyzes the state 
using a Mach-Zehnder interferometer (MZI) with opti- 
cal delay equal to the time delay separating |E) and |L). 
Using the notation of Fig. ^ the action of the interfer- 
ometer on a single time-bin qubit is 

|E) -> i\a-')+ie">'\b-)~e"l'\h+) + \a+) 

|L) ^ i\h-)+ie'^\c-)-e'%+)^\h+), (3) 
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FIG. 1: A single-photon implementation of BB84 suggested 
in Ref. ,2|. The kets |E) and |L) correspond respectively 
to an advanced (early) and a delayed (late) single-photon 
wavepacket. Alice sends one of the four states listed below 
the diagram of the apparatus. The chart indicates which of 
Alice's states are consistent with a given measurement event 
at Bob's side. As described in the text, Bob's apparatus does 
not require active change of measurement basis. 



where (j) is the relative phase along the two paths. Here, 
and for the remainder of this letter, normalizing con- 
stants and overall phase factors have been suppressed. 
By postselecting those cases in which both photons are 
detected at time slots corresponding to or \b~), Bob 
achieves the following effective transformation: 

|EL) ^ \b+b+) + \b-b-) +i{\b+b-) -\b-b+)) 
|LE) ^ \b+b+) + \b-b-) -i{\b+b-) -\b-b+)), (4) 

where a common factor of e*"^ has no consequence. 

The crucial assumption in going from Eq. ® to Eq. ^ 
is that the MZI transforms each of the two time-bin 
qubits identically. For time-bin qubits distinguished by 
a time delay that is short compared to the characteris- 
tic time of interferometric drift (though long compared 
to the time separating |E) and |L)), this assumption is 
certainly valid. The probability of Bob detecting two 
photons on the same output arm (|&+6+} or \b^b^)) de- 
pends on the relative phase between the |EL) and |LE), 
and similarly for the probability of detecting two photons 
on different arms {\b'^b~) or |6~&+)). The critical point 
is that each of these probabilities is independent of the 
interferometer's phase delay, <j)- Thus, just as the DFS 
described in Eq. Q protects a logical qubit encoded in 
two physical qubits from collective dephasing, OWA en- 
ables Bob to measure high-visibility two-photon interfer- 
ence with a MZI that does not require initial calibration 
or active phase stabilization. 

Passive detection via enlarging the Hilbert space. — The 
two-photon quantum key distribution scheme described 
in Ref. |^ has the remarkable property that both Al- 
ice and Bob use passive detection (i.e. they are not re- 
quired to switch between conjugate measurement bases). 
In Ref. 0, Gisin et al. suggest applying Klyshko's ad- 
vanced wave interpretation to generate an associated one- 



photon scheme. We present a specific implementation of 
this one-photon scheme here to show that it achieves pas- 
sive detection by enlarging the Hilbert space (see Fig. ^1 . 
Let the advanced and delayed single-photon wavepackets 
be associated with the poles of the Poincare sphere. The 
four states required for BB84 are typically taken from 
the equator, since a single MZI can be used to generate 
any of the equatorial states. Instead, we imagine using 
two antipodal points on the equator and the poles them- 
selves. Bob analyzes the signal from Alice with a MZI, 
recording which detector fired (one of two possibilities) 
at which time (one of three possibilities). When Bob's 
detection is in the first or third time positions, he can 
reliably distinguish between the pole states based on the 
time of detection. When his detection is in the second 
time position, he can reliably distinguish between the 
equatorial states based on which detector fired. Thus, 
Bob is no longer obliged to make an active chan ge t o his 
apparatus to effect the requisite change of basis [ig . 

To see how this passive detection is derived from en- 
largement of the Hilbert space, consider the quantum 
state of Alice's signal after Bob's MZI. Alice's four states 
of one qubit are mapped onto four mutually nonorthog- 
onal states of a six-state quantum system (see Fig. 
Thus, by mapping a two-state quantum system into a six- 
state quantum system. Bob is able to perform his part 
of the BB84 protocol with a fixed-basis measurement in 
the six-state Hilbert space [lij . 

Combining OWA and passive detection. — OWA and 
passive detection have been previously presented in sep- 
arate proposals (Refs. 0| and 0, respectively). Here we 
present a new scheme that combines these two benefi- 
cial features in a single implementation (see Fig. . The 
new scheme follows from that presented in Ref. p|J, just 
as the preceding single-photon scheme follows from the 
traditional phase-coding implementation. Let the states 
1) and |2) in Fig. |21be associated with the poles of the 
Poincare sphere. Instead of using equatorial states and 
forcing Bob to postselect those cases for which the ad- 
vanced (delayed) amplitudes take the long (short) path, 
we use two equatorial points (|3) and |4)) and the poles 
themselves to make up Alice's four signal states. Signal 
states that are consistent with a given joint detection are 
presented in the chart. As seen in Fig. ^ each photon 
can lead to six different detection events. Thus, since the 
new protocol involves two photons, there are 36 possible 
detection events (see Fig.|21l. 

The protocol operates as follows. As in BB84, Alice 
and Bob publicly agree on an association of each of the 
four signal states (see Fig. \^ with logical values "0" or 
"1" (i.e., 1 ^ "0", 2 ^ "1", 3 ^ "0", 4 ^ "1"). For each 
run of the experiment, Alice randomly chooses one of the 
four signal states and sends it to Bob. When Bob detects 
both photons in their respective middle time slots, he 
has effectively measured in the {3, 4} basis (the "phase" 
basis). When Bob detects both photons in their early 
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FIG. 2: A new scheme for quantum key distribution that combines OWA with passive detection. Two time-bin qubits are sent 
from Ahce to Bob in one of the four quantum states on the left of the figure. The chart on the right uses two levels of structure 
to describe the detection pattern at Bob's side. The coarse structure is defined by the bold lines. Each of the nine bold-lined 
rectangles corresponds to a specification of the joint time of detection of the two photons. The fine structure is defined by the 
thin lines. Each of the four thin-lined rectangles within a bold-lined rectangles corresponds to a specification of which detector 
fired for each of the two photons (this coding is illustrated by an example at the bottom left of the figure) . The numbers in the 
curly brackets in each thin-lined rectangle indicates which (if any) of the four quantum states on the left are consistent with 
the corresponding detection pattern. 



time slots, or both photons in their late time slots, he 
has efFectively measured in the {1,2} basis (the "time" 
basis) |l9l |. After the quantum transmission, Alice and 
Bob publicly announce their bases. On the occasions 
when their bases match, Bob is able to infer the state 
that Alice sent, based on his detection pattern using the 
chart in Fig. [51 As in single-qubit BB84, the occasions 
in which their bases do not match are discarded. The 
scheme achieves passive detection (Bob is not required 
to make any active changes to his apparatus) and auto- 
compensation (the phase delay in Bob's interferometer 
does not affect any measured probabilities). The intrin- 
sic efficiency of the scheme is 1/4, compared to 1/2 for 
single-qubit BB84. 

A feasible implementation. — A proposed implemen- 
tation for the source employed in Fig. |21 is presented 
in Fig. 13 First, a pair of noncoUinear, polarization- 
entangled photons is produced via type-II spontaneous 
parametric down-conversion from a nonlinear crystal 
pumped by a brief pulse Second, the modulating 

element "M" performs one of four functions (filter one of 
the two polarization modes, or introduce one of two rel- 
ative phases between the two polarization modes), based 
on Alice's choice of signal states. Third, the two beams 
are combined with a relative temporal delay that matches 




FIG. 3: A proposed implementation for the source employed 
in Fig. 13 "SPDC" is a nonlinear crystal pumped by a brief 
pulse to produce a noncoUinear, polarization-entangled two- 
photon state via spontaneous parametric down-conversion. 
The action of elements "M" and "P" is described in the text. 



the temporal delay Bob will subsequently introduce with 
his MZI. This stage converts the photon pair from a 
pair of spatially-defined polarization-entangled qubits to 
a pair of polarization-defined time-bin entangled qubits. 
Finally, the element labeled "P" (for polarization) delays 
and rotates one of the polarization modes by a duration 
much greater than the delay of the third step, such that 
the delayed portion of the state in the same polarization 
as the non-delayed portion. Thus, the two photons sent 
from Alice to Bob have the wavepacket structure illus- 
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trated at the top of Fig. [3 

There are two noteworthy aspects of the configuration 
in Fig. 121 First, the technique introduced in Ref. 9] for 
creating time-bin entangled photons pairs only leads to 
superpositions of the correlated possibilities (i.e. |EE) 
and |LL)). The source presented in Fig. |31 enables ar- 
bitrary superpositions of the anti-correlated possibilities 
(i.e. |EL) and |LE)). Furthermore, the correlated states 
can easily be created from this source by rotating the po- 
larization axes at element "M" in Fig. In this way, all 
four time-bin entangled Bell states can be conveniently 
generated with this source. Second, the interference in 
Bob's interferometer results from the indistinguishabil- 
ity of photon amplitudes that were initially in the same 
polarization mode. This is in contrast to configurations 
in which photon amplitudes from different polarization 
modes are made indistinguishable by use of a polarization 
analyzer. Thus, the reduction in visibility that has come 
to be associated with extremely brief pump pulses \vi\ 
will not be present in this scheme. Note that a sym- 
metrization method has been developed to restore visibil- 
ity for experiments using polarization-entangled photons 
created by such a short pulse pump 0, . 

Conclusion. — We have demonstrated that two recent 
innovations in the field of practical quantum key dis- 
tribution (autocompensation and passive detection) are 
closely related to the methods developed to protect quan- 
tum computations from decoherence. Pursuing this con- 
ceptual link between techniques from quantum computa- 
tion and advances in practical QKD, we have developed 
a new QKD scheme (Fig. ^ that combines autocompen- 
sation and passive detection. Furthermore, we have pro- 
posed a practical implementation of the scheme (Fig. ^ 
that is feasible using existing technology. 
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